Principal DevSecOps Engineer

The Principal Dev Sec Ops  Engineer will help modernize and standardize software delivery across the enterprise by building secure, automated CI/CD pipelines, improving developer productivity through self-service engineering platforms, and implementing software delivery standards that can be adopted across multiple engineering teams. This role requires hands-on experience with Dev Sec Ops , software supply chain security, CI/CD automation, and internal developer platforms.

The successful candidate will work closely with engineering teams to build reusable deployment patterns, automate governance, improve software delivery metrics, and mentor developers on engineering best practices.

• Design and implement automated CI/CD pipelines with integrated security, quality, and architectural validation.
• Build and maintain immutable deployment pipelines using build-once, promote-through-environments practices.
• Develop self-service capabilities and standardized engineering templates within an internal developer portal.
• Implement software supply chain security, including SBOM generation, dependency scanning, license compliance, and artifact repository governance.
• Establish engineering standards and reusable development patterns that improve consistency across teams.
• Develop technology governance and OSS intake processes that balance security with developer productivity.
• Measure engineering effectiveness using DORA metrics and developer platform health indicators.
• Mentor engineering teams and promote adoption of modern software delivery practices.
• Build and maintain CI/CD pipelines using Git Hub Actions with Copilot, Git Lab CI, Jenkins, Azure Dev Ops, and self-hosted runners.
• Implement Dev Sec Ops  and software supply chain security practices, including SBOM, dependency scanning, license compliance, JFrog/Artifactory, OSS governance, and SAST/DAST.
• Develop and support internal developer platforms, developer portals, Golden Paths/Paved Roads, and Backstage or similar self-service platforms.
• Implement artifact management and deployment automation using immutable artifacts, build-once/promote-through-environments practices, and artifact repositories.
• Support modernization of legacy Java applications and contribute to software engineering initiatives using modern programming languages.
• Collaborate with engineering teams to improve developer experience, platform engineering capabilities, and software delivery processes.
• Perform technical mentoring and support engineering governance initiatives.

• Bachelor's degree in Computer Science or a similar field of study.
• Minimum 10 years of related experience in an enterprise-level environment at a Staff or Principal level.
• Strong hands-on experience with Dev Sec Ops  and software delivery automation.
• Strong experience designing and implementing CI/CD pipelines using technologies such as Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops, and self-hosted runners.
• Strong knowledge of software supply chain security, including SBOM generation, dependency scanning, license compliance, artifact repository governance, SAST, and DAST.
• Experience with internal developer platforms, developer portals, Golden Paths/Paved Roads, Backstage, or similar self-service platforms.
• Experience with immutable artifacts and build-once/promote-through-environments deployment practices.
• Strong coding experience with modern programming languages and familiarity with legacy Java applications.
• Strong understanding of cloud technologies, with hands-on experience in AWS and AWS Bedrock.
• Experience establishing engineering standards, reusable development patterns, and technology governance processes.
• Strong analytical, problem-solving, communication, and technical leadership skills.
• Ability to mentor engineering teams and drive adoption of modern software delivery practices.

• Experience in Platform Engineering.
• Experience improving Developer Experience (Dev Ex).
• Experience with Java/EJB modernization.
• Experience providing technical mentoring to engineering teams.
• Experience with engineering governance and OSS intake processes.